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i-H ( 57 > Ab stract: A method and system (1 1) for providing quality of service in an IP telephony session between a calling party (21) 
^ and a called party (23) establishes a high quality of service ATM virtual circuit for the session between first and second devices (25, 
0 27), each of the devices (25, 27) having ATM capability and IP capability. The first and second devices (25, 27) provide Mdirectional 
translation between IP media and ATM media. The system (1 1) transports IP media for the session between the calling party (21) 
and the first device (25), and between said called party (23) and a second device (27). The virtual circuit transports ATM media for 
the session between the first and second devices (25, 27). An intelligent control layer (13) provides IP and ATM signaling to set up 
the session. r 
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The present invention relates generally to the field of Internet telephony, and more particularly 
to a method of and system for providing quality of service in an Internet telephony session 

Two trends are currently occurring in die telecommunications marketplace. First, telephony 
services are being added to Internet protocol-based devices. Second, Asynchronous Transfer Mode 
(ATM) networks are being built with the ability to support user specified quality of service (QoS) on a 
per connection basis, as part of die ATM switched virtual circuit service capability. 

Each of these trends have problems. The primary problem with the introduction of telephony 
services to the IP network is one providing predictable QoS on a per call/connection basis. Although 
technologies are being developed in the Internet community to address this problem, tiiere is currently 
no way to guarantee QoS on a per connection basis through an IP network. The primary problem with 
the second trend is not one of basic service capability, but is rather one of access to the service. Today 
virtually all desktop devices have access to an IP network through some sort of local area network 
technology, for example through Ethernet. The problem is that these desktop devices generally do not 
have access to ATM networks that provide the per call/connection guarantee QoS. 

The primary method of addressing QoS in the current IP-BASED networks is to over- 
provision the amount of bandwidth available in the network. Tliis approach will work as long as the 
usage of the network stays widiin the bounds of the available bandwidth. If the usage of the network is 
not predictable, then it is difficult, for example, to prevent a low priority file transfer from interfering 
widi a connection established to carry real-time voice or video data. 

The primary method of providing ATM switched virtual circuit services to devices that do not 
25 have native ATM support is to install routers between the IP network and the ATM network that have 
the ability to generate ATM switched virtual circuits on a per IP flow basis. The problems with this 
approach are: (1) possible destination IP addresses need to be provisioned in the router ahead of time, 
and (2) it is not possible to define, on an IP flow basis, which DP flow should get the ATM switched 
virtual circuit service and which should get IP best efforts service. If a destination address is 
provisioned in the ATM interworking router, then all connections to tliat destination address will 
require an ATM switched virtual circuit. 
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The present invention provides a method of and a system for providing quality of service in an 
IP telephony session between a calling party dient and a called party client. The system of the present 
invention establishes a high quality of service ATM virtual circuit for die session between first and 
second devices, each of the devices having ATM capability and IP capability. The first and second 
devices provide bidirectional translation between Internet Protocol (IP) media and ATM media. The 
system transports IP media for the session between the calling party client and the first device, and 
between the called party client and the second device. The virtual circuit transports ATM media for 
the session between the first and second devices. An intelligent control layer provides IP and ATM 
signaling to set up the session. 

In one embodiment of the present invention, the first and second devices include access control 
managers tliat are bridges between an IP network and an ATM network. The intelligent control layer 
assigns a temporary session IP proxy address for the called party at the first access control manager 
and a temporary session IP proxy address for the calling party at the second access control manager. 
1 5 The system establishes a switched virtual circuit through the ATM network for the session between the 
first access control mm aper and the second access control manager by assigning a temporary session 
calling party number ar the first access control manager and a temporary session called party number at 
the second access control manager. 

During the session, the system routes IP media from the calling party to the temporary IP 
20 proxy address of the called party at die first access control manager. The first access control manager 
packages the IP media in ATM cells for transport through the virtual circuit to the second access 
control manager. The system then routes IP media from the second access control manager to the 
called party. Similarly, die system routes IP media from the called party to the temporary IP proxy 
address of the calling party at the second access control manager. The second access control manager 
packages the IP media in ATM cells for transport through the virtual circuit to the first access control 
manager. The system then routes IP media from the first access control manager to the calling party. 

In an alternative embodiment, the first and second devices include routers that have both IP and 
ATM capability. The calling party client obtains an authentication ticket and then initiates an IP 
telephony session with a quality of service request When the called party client accepts the session, 
30 the calling party client initiates setup of a resource reservation protocol IP media session with an 
ingress router. The ingress router then sets up the IP media session through an egress router to the 
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called party client. When the IP media session is setup, the ingress router sets up an ATM switched 
virtual connection with the egress router. 

BRIEF DESCRIPTION OF THE DRAWINGS 
5 Fig. 1 is a block diagram of a preferred embodiment of the system of the present invention. 

fig. 2 is a call flow diagram illustrating the signaling and call setup according to the 
embodiment of Fig. 1. 

fig. 3 is a block diagram of an alternative embodiment of the system of the present invention, 
fig. 4 is a call flow diagram illustrating the signaling and call setup according to the 
1 0 embodiment of Fig. 3 . 

DETAILED DESCRIPTION 

Referring now to the drawings, and first to fig. 1, a system according to a preferred 
embodiment of the present invention is designated generally by the numeral II. System 1 1 includes a 
media service control point (MSCP) 13. MSCP 13 includes an IP telephony session establishment 
server, which in the preferred embodiment is a session initiation protocol (SIP) server 15, an ingress 
Asynchronous Transfer Mode (ATM) MSCP 17, and an egress ATM MSCP 19. As will be explained 
in detail hereinafter, MSCP 13 provides an intelligent control layer for the establishment of an Internet 
Protocol (IP) telephony session between a first IP telephony user client 21 and a second IP telephony 
20 user client 23. 

System 1 1 includes an ingress access control manager 25 and an egress access control manager 
27. Access control managers 25 and 27 provide a media gateway between IP telephony user clients 21 
and 23 and an ATM network 27. Ingress access control manager 25 provides an ATM media and 
signaling interface to an ingress ATM switch 29 of ATM network 27. Similarly, egress access control 
25 manager 27 provides an ATM media and signaling interface to an egress ATM switch 3 1 of ATM 
network 27. 

In fig. 1, IP signaling paths are indicated with dotted lines and ATM of signaling paths are 
indicated with dashed lines. IP media paths are indicated with solid lines and ATM media paths are 
indicated with bold solid lines. 
30 In the embodiment of fig. 1, a Quality of Service (QoS) connection is provided by routing 

traffic on the QoS capable backbone provided by ATM network 27 According to the present 
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invention, an ATM connection is created for the IP telephony session between user clients 2 1 and 23 
QoS extensor* to the data network applications part (DNAP) protocol perform the signaling between 
MSCP 13 and access control managers 25 and 27. The access control managers 25 and 27 establish 
the ATM QoS capable connection. While in the preferred embodiment of present invention, the QoS 
capable connection is provided by ATM switched virtual circuits, the present invention can also be 
.mplemented in a variety of odier technologies, such as SONET, and wave division multiplexing. 

As will be explained in detail hereinafter, the data path for the session is secured against 
unauthorized traffic by the use of proxy addressing. The proxy addressing requires translation by the 
access control managers 25 and 27 to route the media to its intended destination. During session 
establishment, foe addresses of the media stream endpoints are exchanged between user client 21 and 
user client 23. The signaling message containing the media address of user client 21 is changed to 
rcllect a proxy address, which is an interface at egress excess control manager 27. The excess control 
manager interface is assigned on a per session basis. The per session interface uniqueness is 
accomplished by the allocation and deallocating of ephemeral ports at the access control managers. 
Associated with the ephemeral ports are the addresses used to create and transit the ATM connection. 
Likewise, the signaling message containing the media address for user client 23 is changed to reflect a 
proxy address at ingress access control manager 25. 

The system of the present invention dynamically configures QoS connections and ensures their 
security in two ways. First, die QoS connection is dynamically configured by the use of ATM switched 
virtual connections. The switched virtual connections are created on a per session basis during call 
establishment. MSCP 13 invokes the IP to ATM interface mechanisms of access control managers 25 
and 27 with DNAP QoS messages. As will be explained in detail hereinafter, access control manager 
25 launches a user network interface (UNI) protocol setup. The ATM traffic sent to and received by 
access control managers 25 and 27 is intercepted by ATM switches 29 and 31, respectively, and 
25 forwarded to their associated ATM MSCPs 17 and 19. The ATM MSCPs create the switched virtual 
circuit between ATM switches 29 and 3 1. Access control managers 25 and 27 map the media stream 
of the session to its switched virtual circuit and the session traffic transits their respective switch virtual 
circuit 

The second aspect of the real-time configuration solution is the dynamic securing of the access 
30 to the connections. This is done by dynamically allocating the proxy addresses during session 
establislunent from a pre-provisioned proxy address pool The proxy addresses are returned to the 
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user clients 21 and 23 in the signaling messages. The session proxy address mapping is created at the 
MSCP and communicated to access control managers 25 and 27 by the DNAP protocol. The proxy 
addresses and the actual session addresses are held at the SEP server 15 and the access control 
managers 25 and 27 for the duration of the session. When the session is terminated, proxy addresses 
are deallocate. 

Referring now to Fig. 2, there is shown a call flow diagram of session initiation according to 
the embodiment of Fig. I. User client 21 initiates die session by sending a SIP INVITE message 33 to 
user client 23. For purposes of illustration, the IP address of user client 21 is A@XY2.COM. The SIP 
INVITE is addressed to user client 23 at a proxy address at MSCP SIP server 15. which for purposes 
to illustration is B@XYZ-S1P.COM. The SIP INVITE specifies the audio source as the real IP 
address of user client 21. and specifies that QoS is requested. Upon receipt of invite 33. SIP server 15 
sends an invite 35 to the real IP address of user client 23, at B@XYZ2000.COM. Invite 35 specifies 
the audio source as a temporary IP proxy address allocated to user client 21 at egress access control 
manager 27. which for purposes of illustration is A@ACM-Y.COM. If user client 23 accepts the 
session, user client 23 sends a 200OK SIP response 37 back to SIP SERVER 15, specifying an audio 
destination as its real IP address. While in die preferred embodiment, SIP IP telephony signaling is 
used, other IP signaling protocols, such as H.323 may be used. 

Upon receipt of response 37, SIP server 15 allocates a call tag, and sends a reserve bandwidth 
message 39 to ingress ATM MSCP 17. Message 39 specifies the audio destination for the session of 
as a temporary IP proxy address allocated to user client 23 at ingress access control manager 25. For 
purposes of illustration, the temporary IP proxy address allocated user client 23 is 
B@ACM.XCOM. The bandwidth reservation message also identifies the call tag and specifies the 
called number for the ATM connection as egress access control manager 27. 

Upon receipt of bandwidth reservation message 39, ingress ATM MSCP 17 sends a QoS setup 
request 41 to ingress access control manager 25. Setup request 41 identifies the real source address 
and proxy source address for user client 21. Setup request 41 also identifies the call tag and the called 
party number. Ingress ATM MSCP 17 also sends a QoS setup indication message 43 to egress access 
control manager 27. Setup indication 43 identifies the real destination address and proxy destination 
address for user client 23, as well as the call tag and the called party number for the ATM session. 
Egress access control manager 27 responds to setup indication 23 with a setup indication 
acknowledgment 45 back to ingress ATM MSCP 17. Upon receipt of the QoS setup request 41, 
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ingress access control manager 25 sends a user network interface (UNI) protocol setup message 47 to 
ingress ATM switch 29. Upon receipt of UNI setup message 47. ingress ATM switch 29 sends a 
DNAP setup 49 to ingress ATM MSCP 17. When ingress ATM MSCP 17 responds, as indicated at 
5 1, ingress ATM switch 29 sends a setup message 53 to egress ATM switch 3 1 . Upon receipt of setup 
message 53, egress ATM switch 31 sends a DNAP setup message 55 to egress ATM MSCP 19 
When egress ATM MSCP 19 responds, as indicated at 57, egress ATM switch 3 1 sends a UNI setup 
message 59 to egress access control manager 27. 

Upon receipt of setup message 59, egress access control manager 27 sends a CONNECT 
message 61 to ingress access control manager 25. Upon receipt of CONNECT message 6l, ingress 
access control manager 25 responds to QoS setup request 41 with a QoS setup request 
acknowledgment 63 back to ingress ATM MSCP 17. Upon receipt of setup request acknowledgment 
61, ingress ATM MSCP 17 responds to the reserve bandwidth message 39 with a reserve bandwidth 
acknowledgment message 65 back to MSCP SIP server 15. Upon receipt of reserve bandwidth 
acknowledgment 65, SIP server 1 5 deallocate the call tag and sends a SIP 200 OK response 67 back to 
user client 21. The OK response identifies the audio destination as the temporary IP proxy address 
allocated to user dien 2J at ingress access control manager 25. Then, user client 21 sends IP media 
packets addrcfsfd to user client 23 at the temporary proxy address at access control manager 25. 
Similarly, user client 23 sends IP media packet addressed to user client 21 at the temporary proxy 
address at egress access control manager 27. 

From the foregoing, it may be seen that the embodiment of Fig. 1 provides QoS for IP 
telephony sessions between IP user clients. Through the use of temporary proxies, user clients 21 and 
23 are unaware that their session is carried on an ATM switched virtual circuit User clients 21 and 23 
use standard SIP messaging and standard proxying for call setup and no special intelligence is required 
on the part of the user'clients 21 and 23. An intelligent network layer makes the system of the present 
25 invention transparent to user clients 21 and 23. 

Referring now to Fig. 3, an alternative embodiment of the system of the present invention is 
designated generally by die numeral 71. System 71 includes MSCP indicated generally at 73. MSCP 
73 includes an MSCP SIP server 75, an ingress ATM MSCP 77, and an egress ATM MSCP 79. 
Additionally, MSCP 73 includes a policy server 81. MSCP 73 is adapted to establish a QoS IP 
30 telephony session between a calling user client 83 and a called user client 85. 

An ingress router 87 provides an interface between IP user client 83 and an ATM network 89. 
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An egress router 91 provides interface between user client 85 and ATM network 89. Ingress router 
87 provides an interface to an ingress ATM switch 93 of ATM network 89. Similarly, egress router 91 
provides an interface to an egress ATM switch 95 of ATM network 89. 

Referring now to Fig. 4, there is shown a call flow diagram of session initiation according to 
the embodiment of Fig. 3. User client 83 initiates the session with a Diameter protocol session 
authentication request 97 addressed to MSCP SIP server 75. Server 75 responds with a Diameter 
session authentication response (ticket), as indicated at 99. Then, user client 83 sends a SIP INVITE 
message 101 to user client 85. For purposes of illustration, the IP address of user client 85 is 
A@XYZ.COM. The SIP INVITE 101 is addressed to user client 85 at a proxy address at MSCP SIP 
server 75, which for purposes to illustration is B@XYZ-SIP.COM The SIP INVITE 101 specifies the 
audio source as the real IP address of user client 83, and specifies that QoS is requested. -The SIP 
INVITE 101 also includes the authentication ticket received in response to Diameter session 
authentication request 97. Upon receipt of the SEP rNVITE 101, SIP server 75 sends an INVITE 103 
to the real IP address of user client 85, at B@XYZ2000.COM INVITE 103 specifies the audio 
source as the IP address of user client 83. If user client 85 accepts the session, user client 85 sends a 
200OK SIP response 105 back to SEP Server 75, specifying an audio destination as its real EP address. 

Upon receipt of 200OK SEP response 105, SEP server 75 sends a reserve bandwidth message 
107 to MSCP policy server 8 1. Message 107 specifies the audio source for the session of as the real IP 
address of user client 83, and the audio destination for the session as the real IP address of user client 
20 85. The message 107 also includes the authentication ticket Upon receipt of the message 107, MSCP 
policy server 81 sends a response 109 back to MSCP SIP server 81. Then, SEP server 75 sends a SEP 
200OK response 1 1 1 to user client 83. 

Upon receipt of 200OK response 11 1, user client 83 sends a resource reservation protocol 
(RSVP) path message 1 13 to ingress router 87. Then, ingress router 87 sends a COPS request handle 
25 message 1 15 to MSCP policy server 81. When MSCP policy server 8 1 responds, as indicated at 1 17, 
ingress router 87 sends an RSVP path message 1 19 to egress router 91. Then, egress router 91 sends 
an RSVP padi message 121 to user client 85. User client 85 responds with an RSVP reservation 
response 123 back to egress router 91. Egress router 91 then responds with an RSVP reservation 
response 125 back to ingress router 87. 

Upon receipt of response 125, ingress router 87 sends a UNI setup message 127 to ingress 
ATM switch 93. Upon receipt of UNI setup message 127, ingress ATM switch 93 sends a DNAP 
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setup 129 to ingress ATM MSCP 77. When ingress ATM MSCP 77 responds, as indicated at 131 
mgress ATM switch 93 sends a setup message 133 to egress ATM switch 95. Upon receipt of setup 
message 133, egress ATM switch 95 sends a DNAP setup message 135 to egress ATM MSCP 79 
When egress ATM MSCP 79 responds, as indicated at 137, egress ATM switch 95 sends a UNI setup 
message 139 to egress router 91. 

Upon receipt of setup message 139, egress router 91 sends a CONNECT message 141 to 
ingress router 87. Upon receipt of CONNECT message 141, ingress router 87 responds to RSVP 
pad, message 1 13 with an RSVP reserve response 143 back to user client 83. Then, the IP telephony 
session is established between user client 83 and user client 85. 

The embodiment of Figs. 3 and 4, distributes a certain amount of system intelligence to user 
clients 83 and 85. User clients 83 and 85 are responsible for a greater part of call setup than^re user 
clients 21 and 23 of the embodiment of F,gs. 1 and 2. User clients 83 and 85 process signaling in 
Diameter and RSVP protocols in addition to signaling in SIP protocol. 

From the foregoing it may be seen that the present invention overcomes the shortcomings of 
the prior art The present invention dynamically establishes and secures QoS IP telephony sessions by 
routing traffic on a high QoS backbone, which is preferably an ATM backbone. Those skilled in the art 
will recognize alternative embodiments, given the benefit of this disclosure. Accordingly, the foregoing 
disclosure is intended for purposes of illustration and not limitation. 
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WHAT IS CLAIMED IS: 

• 1 . A method of providing quality of service in an Internet Protocol (IP) telephony session 

2 between a calling party and a called party, which comprises the steps of. 

3 transporting IP media for said session between said calling party and a first device having IP 

4 capability and ATM capability; 

5 transporting IP media for said session between said called party and a second device having IP 

6 capability and ATM capability, and 

7 establisliing an ATM virtual circuit for said session between said first device and said second 
S device. 



1 2. The method as claimed in claim 1 , wherein said first and second devices 

I 3. The method as claimed in claim 1, wherein: 
2 



3 



4 



are routers. " 



said first device is identified by a temporary session IP proxy address for said called party, and 
said second device is identified by a temporary session IP proxy address for said calling party. 



4. The method as claimed in claim 1, wherein said step of establishing an ATM virtual circuit 

2 between said first and second devices comprises the steps ofi 

3 assigning a calling party number for said session at said first device; and 



assigning a called party number for said session at said second device. 



1 5. A method of providing quality of service in an IP telephony session between a calling party and 

2 a called party, which comprises the steps of:. 

3 assigning a temporary IP proxy address for said called party for said session at a first access 

4 control manager, 

5 assigning a temporary IP proxy address for said calling party for said session at a second access 

6 control manager, and 

establishing a switched virtual circuit for said session between said first access control manager 

3 and said second access control manager. 
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1 6. The method as claimed in claim 5, wherein said step of establislung said virtual circuit 

2 comprises the steps of: 

3 assigning a temporary calling party address for said session at said first access control manaaer 

4 and 



5 
1 

2 



1 

2 



assigning a temporary called party address for said session at said first access control 



manager. 



7. The method as claimed in claim 6, wherein said step of assigning a temporary calling party 
address comprises the step of selecting a calling party address from a pool of calling party addresses 
3 allocated to said first access manager. 

1 3. The method as claimed in claim 6, wherein said step of assigning a temporary called party 

2 address comprises the step of selecting a called party address from a pool of called party addresses 

3 allocated to said second access manager. 



9. The method as claimed in claim 5, further comprising the steps of: 

routing IP met! i traffic from said calling party to said called party IP proxy address at said first 



3 access control manager, and 

4 routing IP media traffic from said called party to said calling party IP proxy address at 'said 

5 second access control manager. 

1 10. The method as claimed in claim 9, further comprising the steps of: 

2 translating IP media traffic received at said called party IP proxy address to ATM traffic for 

3 transport through said virtual circuit from said first access control manager to said second access 

4 control manager, and' 



translating IP media traffic received at said calling party IP proxy address to ATM traffic for 
transport through said virtual circuit from said second access control manager to said first access 



7 control manager. 
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1 II. The method as claimed in claim 1 0, further comprising the steps of: 

2 translating ATM traffic received at said temporary called party address to IP media traffic for 

3 transport to said called party, and 

translating ATM traffic received at said temporary calling party address to IP media traffic for 

5 transport to said calling party. 

1 12. A method of providing quality of service in an IP telephony session between a calling party and 

2 a called party, which comprises the steps of: 

3 assigning a temporary IP proxy address for said called party for said session at a first access 

4 control manager, 

5 assigning a temporary IP proxy address for said calling party for said session a second access 

6 control manager, 

7 assigning a temporary second network calling party address for said session at said first access 

8 control manager, and 

9 assigning a temporary second network called party address for said session at said first access 

1 0 control manager. 

1 13. The method as claimed in claim 12, wherein said step of assigning a temporary second network 

2 calling party address comprises the step of selecting a calling party address from a pool of second 

3 network calling party addresses allocated to said first access manager. 



1 

2 



14. The method as claimed in claim 12, wherein said step of assigning a temporary second network 
called party address comprises the step of selecting a called party address from a pool of second 
3 network called party addresses allocated to said second access manager. 

1 15. The method as claimed in claim 12, further comprising the steps of: 

2 routing IP media traffic from said calling party to said called party IP proxy address at said first 

3 access control manager, and 

4 routing IP media traffic from said called party to said calling party IP proxy address at said 

5 second access control manager. 
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I 16. 



The method as claimed in claim 15, wherein: 

2 said second network includes an ATM network; 

3 said temporary second network calling party address includes a temporary calling party 

4 number and 



5 



said temporary second network called party address includes a temporary called party number. 



1 17. The method as claimed in claim 16, further comprising the step of establishing a switched 

2 virtual connection through said ATM network between said temporary called party number and said 

3 temporary calling party number. 

1 18. The method as claimed in claim 1 7, further comprising the steps of: 

2 translating IP media traffic received at said called party IP proxy address to ATM traffic for 

3 transport through said virtual circuit from said first access control manager to said second access 

4 control manager, and 

5 translating IP media traffic received at said calling party IP proxy address to ATM traffic for 

6 transport through said virtual circuit from said second access control manager to said first access 

7 control manager. 

1 19. The method as claimed in claim 17, further comprising the steps of. 

2 translating ATM traffic received at said temporary called party number to IP media traffic for 

3 transport to said called party, and 

4 translating ATM traffic received at said temporary calling party number to IP media traffic for 

5 transport to said calling party. 
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1 20. A system for providing a quality of service IP telephony session between a calling party and a 

2 called party, which comprises: 

3 an IP network, said IP network providing IP access to the calling party and to the called party; 

4 an ATM network; 

5 a first device connected between said IP network and said ATM network, said first device 

6 providing bidirccuonaltrans^^ 

7 a second device connected between said IP network and said ATM network, said second 

8 device providing bidirectional translation between ATM traffic and BP media traffic; and 

9 an intelligent control layer for establisliing a virtual circuit through said ATM network for an IP 
1 0 telephony session between the calling party and the called party. 



I 21. 

2 

3 



4 

5 



The system as claimed in claim 20, wherein: 

said first device is operably connected to an ingress switch of said ATM network; and 
said second device is operably connected to an egress switch of said ATM network. 



1 22. 
2 



The system as claimed in claim .20, wherein said intelligent control layer comprises: 
an ATM intelligent controller, said ATM intelligent controller providing session setup signaling 
3 to said first and second devices; and 

an IP intelligent controller, said IP intelligent controller providing call setup signaling to said 
ATM intelligent controller. 



1 23. The system as claimed in claim 20, wherein in said first and second devices each comprise a 

2 router. 



1 24. The system as claimed in claim 20, wherein said intelligent control means comprises: 

2 means for assigning a temporary IP session proxy address for said called party at said first 

3 device; and 

4 means for assigning a temporary IP session proxy address for said calling party at said second 

5 device. 
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